281 matches found
Exploit for Path Traversal in Apache Http_Server
This is a PoC exploit for CVE-2021-41773, a remote code execution vulnerability in Apache HTTP Server versions 2.4.49 and 2.4.50. The exploit targets the CGI enabled feature of these versions, allowing an attacker to execute arbitrary code on the server. The exploit is written in Python and uses...
unserialize-exploit
Remote Code Execution By unserialized functionhttps://not...
security-research
It is an offensive tool for web applications. The repository con...
Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware
This is a PoC exploit for CVE-2021-36260, a command injection vulnerability in the web server of some Hikvision product. The vulnerability allows an attacker to launch a command injection attack by sending malicious commands to the device. The exploit is implemented in Python and provides several...
Exploit for CVE-2025-34030
CVE-2025-34030 - sar2html 'plot' parameter RCE CVSS: 10.0 Cri...
Exploit for CVE-2025-49132
CVE-2025-49132 PoC Improved This is an improved version of...
Exploit for CVE-2025-32778
CVE-2025-32778 - Web-Check Command Injection Exploit !Criti...
Exploit for Code Injection in Xwiki
CVE-2025-24893 - XWiki Platform Remote Code Execution A Pytho...
Exploit for Code Injection in Ispconfig
CVE-2023-46818 PoC This is a python implemntation of the PoC p...
Exploit for PHP Remote File Inclusion in Scripteo Ads_Pro
CVE-2025-4380 - Ads Pro Plugin Burpsuite Request/Response...
Exploit for CVE-2025-49113
CVE-2025-49113 – Roundcube Webmail RCE Exploit Python PoC...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
CVE-2025-31161 - CrushFTP Authentication Bypass Exploit This...
Exploit for Improper Protection of Alternate Path in Vbulletin
CVE-2025-48827 - vBulletin Authentication Bypass Exploit O...
Akamai CloudTest XML Injection
This is a Python-based exploit for CVE-2025-49493, which affects Akamai CloudTest versions before 60 2025.06.02 12988. The vulnerability allows for XML External Entity XXE injection through the SOAP service endpoint...
Exploit for Improper Neutralization in Dlink Dns-320_Firmware
CVE-2024-10915 - D-Link NAS Command Injection Exploit This Py...
Exploit for CVE-2024-25600
Bricks Builder RCE Exploit CVE-2024-25600 This project cont...
Exploit for CVE-2025-49132
CVE-2025-49132-poc I made this poc for CVE-2025-49132https...
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
CVE-2025-32463SudoPoC PoC for CVE-2025-32463: Local privileg...